DOJ Hasn't Actually Found Silk Road Founder's Bitcoin Yet
Techdirt has an interesting followup on the arrest and indictment of Silk Road founder Ross Ulbricht, in connection to which the FBI seized 26,000 or so Bitcoins. From the Techdirt piece: "However, in the criminal complaint against Ulbricht, it suggested that his commissions were in the range of $80 million -- or about 600,000 Bitcoins. You might notice the disconnect between the 26,000 Bitcoins seized and the supposed 600,000 Ulbright made. It now comes out that those 26,000 Bitcoins aren't even Ulbricht's. Instead, they're actually from Silk Road's users. In other words, these were Bitcoins stored with user accounts on Silk Road. Ulbricht's actual wallet is separate from that, and was apparently encrypted, so it would appear that the FBI does not have them, nor does it have any way of getting at them just yet. And given that some courts have argued you can't be forced to give up your encryption, as it's a 5th Amendment violation, those Bitcoins could remain hidden -- though, I could see the court ordering him to pay the dollar equivalent in restitution (though still not sure that would force him to decrypt the Bitcoins)." The article also notes that the FBI's own Bitcoin wallet has been identified, leading to some snarky micropayment messages headed their direction.
Could he have another individual in another country transfer his bitcoins away from where the FBI could get at them, if the FBI eventually got access to his wallet?
He might need some of that hoard to pay for his defense. I don't know that going cheap on this will be in his interest.
much of left-wing thought is a kind of playing with fire by people who don't even know that fire is hot - George Orwell
He might be selling each bitcoin at $5 apiece, since there isn't that much liquidity.
The future of Bitcoin Users
If he has secured his private keys, then nobody can touch his Bitcoins. Not the NSA, FBI, CIA...
If he has the key in some obvious place, well, he is toast. But if it has been this long, I'd guess he secured is stuff.
To whom? Who has he harmed that deserves restitution simply by doing something the government does not like?
This brings up an interesting thought. Since the total number of Bitcoins is fixed, and if these coins seem to now be irrecoverable, what happens to the currency when it disappears into encrypted black holes like this?
// file: mice.h
#include "frickin_lasers.h"
They'll get along fine with him in prison, and by the time he gets out, the Bitcoins will be a dead fantasy.
Now imagine that this Ulbright ends up in jail, or dies, the keys to this encrypted wallet are lost, and with it these 600,000 bitcoin are lost. I think this is a pretty realistic scenario.
Now what consequence would this be for the bitcoin as a currency, when a significant chunk of its coins are taken our of the equation? It's about 5% of the current total number of almost 12 million bitcoin in existence (and 3% of the theoretical maximum of 21 mln). And bitcoin can not be recreated or added to, like a regular currency.
Another thing of note, is that apparently a single bitcoin user managed to amass 5% of the total number of that currency in existence. Those numbers potentially give that person massive market power: dumping them all on the market in one go would cause the value of bitcoin to crash. Smaller quantities have that potential already.
in the criminal complaint against Ulbricht, it suggested that his commissions were in the range of $80 million -- or about 600,000 Bitcoins.
Yes, and given how badly he managed his assets, I doubt even a fraction of this will be recovered. He was not a very good businessman, his servers weren't very well secured... in fact the only thing in the "had lots of" category with this guy was ego. I mean really... "Dread Pirate Roberts"? And have you seen some of the things he wrote on this website of his? "I'll take as much of your money as I want because this is my ship. If you don't like it, fuck off." -- It's actually included in the criminal indictment against him, along with a laundry list of, shall we say, personality shortcomings of his leading to other elements of the criminal underground coming by to explain all meanings of the word "respect" to him, and then him blowing tons and tons of money either paying these people off, or trying (pathetically) to put hits out on them.
If there's one charge I could add to the indictment, it would be criminal stupidity.
It now comes out that those 26,000 Bitcoins aren't even Ulbricht's. Instead, they're actually from Silk Road's users. In other words, these were Bitcoins stored with user accounts on Silk Road.
Technically, they were for purchases pending. Silk road worked by letting you transfer coins into a silk road proxy account. It ran every submission through its "tumbler" to randomize which coins were actually used for which transactions. So what was seized was basically the day's take out of the register, as it were.
Ulbricht's actual wallet is separate from that, and was apparently encrypted, so it would appear that...
That he'll be charged as a terrorist and sequested in a room somewhere to be beaten with a metal pipe or waterboarded until he gives up the password. Has anyone heard from him lately?
And given that some courts have argued you can't be forced to give up your encryption, as it's a 5th Amendment violation...
We'll just create a new court especially to prosecute terrorists like him extrajudicially. Oh wait... we already did.
The article also notes that the FBI's own Bitcoin wallet has been identified, leading to some snarky micropayment messages headed their direction.
Taunting the police has historically worked out quite well for criminals. Dude, you aren't anonymous. You basically just signed your own search warrant.
#fuckbeta #iamslashdot #dicemustdie
Could seizure by authorities unable to crack encryption have some even slight deflationary effects on Bitcoins?
"FBI's own Bitcoin wallet has been identified, leading to some snarky micropayment messages headed their direction."
Ah. Obama's "Super Duper Serfs" have failed the first test of "Super Duper" obviously.
Now, we have verifiable information and links of Obama to the DoJ's actions all to inflate the value of Obama's financial wealth at the expense of peoples world wide.
So simple.
How lovely.
Obama is now trash for the bin.
None too soon.
He buried them in 50-gallon drums in the desert. Here are the coordinates:
+34 59 20.00, -106 36 52”
Read the story.
$3.6 million was the money in transit between buyers and sellers. SR offered a mixing system for payments between buyers and sellers to make tracing who bought from who more difficult. It was the money in the mixer when they seized the server.
$80 million is the estimate of the guy's personal fortune.
upon the advice of my lawyer, i have no sig at this time
Congratulations on not even managing to read the summary.
It's not that bitcoin is unstable bullshit (which it might be) but that you fail at reading comprehension.
The 3.6 million is from the 26,000 bitcoins taken from user accounts on his servers for purchases pending.
The 80 million is from the 600,000 bitcoins that are in his personal wallet.
I got my package I ordered in mail today :-) at my mailbox etc drop box
I had made a small hash order and then saw news of the shut down, where I live there is 2 unsecured hotspots a library, and a coffee shop I can reach with my beam antenna which I used those for silk road purchases.
I gave up thinking I wouldn't get my order since the site shut down 3 days after my order.
But the funny thing is I got home opened the blank package inside was my hash and a small funny message printed and cut out saying "so long and thanks for all the fish..."
Hehe, there is another "silk road" type site that went up but is more of a classifieds Craigslist type setup I saw advertised on the "hackBB" tor forum which is still up.
The price has been fairly stable over that period. It fell a bit on the news but has mostly recovered.
No, that's not what people have been saying at all. No one is saying that the NSA can create SHA-1 collisions at will, or decrypt AES at will. Geeks on slashdot should be able to succeed in protecting data they really want hidden, such as a bitcoin wallet. It sounds like this guy did just that. No reasonable interpretation of the 5th amendment would allow the government to force him to give up his passwords.
The "Privacy Chicken Littles" have been complaining about the NSA tracking their locations, analyzing their social network connections, reading their emails, and generally sticking their electronic surveillance in every orifice. Personally, I'd have much less of a problem with this if they fessed up to what they're doing to spy on us. It's secret police that really scare me.
Celebrate failure, and then learn from it - Nolan Bushnell
For a random person with a relatively minor offense, I don't see the effort being worth it, but brute forcing this should be simple enough given the power that's available.
First thing I'd do is break his other passwords, those will give immediate clues to the sort of password style that is being dealt with... No symbols? Always starts with uppercase? Never more than two capitals? Hell, given his track record it's just as likely that half the passwords are reused.
So... given a reasonably accurate set of parameters, I bet the total possible set of passwords becomes very reasonable, even considering the double encryption that takes place with the wallet (SHA512 is used on the master key before AES IIRC) and technically doubling the CPU effort needed for brute forcing. If the NSA wanted it, a couple hours with his stuff and a few more hours of brute forcing would do it.
Regardless of how great the encryption itself is, key management is still the biggest weakness. Either he has to be able to remember it, which means it's either short or predictable in some fashion, or it has to be stored which means it's recoverable.
If he spends the bitcoins, then the signing chains are unlikely to get very long before someone is willing to roll over for the feds, they they just need to follow the chains upstream. They should also be able to follow chains from the customers downstream.
If he doesn't spend them, then from his perspective they're as good as seized anyway.
Once the government shutdown is over, I predict the FBI will find the missing bitcoins under the cushions of Ulbricht's couch. Or, maybe they'll find his bitcoin wallet in the pocket of his jeans in his mom's washing machine. (Mom never quite understood that thing he said about bitcoins being good for money laundering.)
Attempted murder? Now honestly, did they ever give anyone a Nobel prize for "attempted chemistry?"
From The Tellegraph ...
By chance one of those agents, posing as a major drug smuggler, was contacted by Dread Pirate Roberts, who asked him to torture and execute someone who had stolen Bitcoins from the site.
The agent sent fake pictures of a man being tortured, and of a dead body, and was paid $80,000.
Apparently encouraged, Dread Pirate Roberts then asked another drug dealer to kill a Silk Road user in Canada called "FriendlyChemist" who was threatening to release details about the site.
He wrote: "I would like to put a bounty on his head if it's not too much trouble for you. Necessities like this do happen from time to time for a person in my position. I wouldn't mind if he was executed."
He then said $150,000 seemed too much, adding: "Don't want to be a pain here but the price seems high. Not long ago I had a clean hit done for $80,000. Are the prices you quoted the best you can do? I would like this done asap ... it doesn't have to be clean."
If you want news from today, you have to come back tomorrow.
Let's get serious here. These guys still operate with tiny pieces of paper hidden on a human messenger. This is slower than TCP-IP over pigeons:
https://tools.ietf.org/html/rfc1149
https://en.wikipedia.org/wiki/IP_over_Avian_Carriers
As far as getting a serious indictment on those people through monitoring their Internet activities, well it isn't really worthed trying unless you can keep the costs of trying quite low.
Everything I write is lies, read between the lines.
They had him under surveillance for a long time. They have any passwords he would use on a regular basis - including any for keepass or similar password wallets.
If he has secured his private keys, then nobody can touch his Bitcoins. Not the NSA, FBI, CIA...
I've heard people say that the NSA can decrypt various things that are thought to be impossible (in reasonable time). Even if that were true, I doubt they are going show their hand and remove all doubt over something as trivial as this, so i think you are correct.
While he still has access to his bitcoins, they can argue that they should be allowed to force him to give up his keys. If he no longer has access to his bitcoins then they can't, so there is an advantage to him putting them somewhere where he can't get them. He'd need to find someone he can trust though...
because they went into his house and tapped his keyboard?
I seriously have hard time believing that he was using keepass or give-nsa-pass for his passwords...
world was created 5 seconds before this post as it is.
Uh... come on folks, this is /. after all. When you [x] Post Anonymously, it's anonymous. Basically, when you click that anonymous button, it does a reverse traceroute and auto-roots every server and network device you've traveled across to get here. From there, it modifies server and device logs to substitutes your IP with the IP of [famous coffee shop] farthest from your actual location.
Only post anonymously when you're absolutely sure you need to. ;)
"I've heard people say that..."
I just read "I haven't been paying attention, and or don't understand, but I'm going to type anyway". We have been talking about it for months now, and we can draw a box around what is feasible.
They don't need the money, they just need to take it out of his ability to use. And the transaction history would be more valuable than the dollars. So there is little point trying, except as an academic exercise to explore plausibility.
If they could break it, we wouldn't have this story. Just the normal conspiracy types saying they can, and no denials. It is marginally possible that things have changed recently, but it makes no sense to assume so.
Unless you store sensitive data, in which case you always assume so.
Nope. An account of his arrest says FBI waited in an ambush for him to open his notebook and login before grabbing him.
Despite what media and/or LEA tells you, planting spyware is not that easy if you're taking care of basic security.
They don't need the money, they just need to take it out of his ability to use.
This is one of the problems with BitCoin. Coins will be lost over time, as people forget their passwords or die or are otherwise prevented from accessing their wallets. There is no way to get them back or replace them.
Finally! A year of moderation! Ready for 2019?
You falsely assume that he has to spend them in the US.
This is not a problem, because of the way bitcoins can be divided.
c++;
Until someday we are all trading tiny divisions of the last 3 accessible bitcoins :) Talk about deflation!
which does not mean, that he unlocked any keystores on that notebook.
Public defenders are a good choice. I know that there's this Hollywood cliche that public defenders were C students that are worthless and don't know what they are doing but that isn't usually the case. Many of them are quite passionate about what they do, and good at it. Also they have a lot of trial experience, which is something that private attorneys often don't. Knowing the law and being good at trial are different things and public defenders get a lot of trial time. Plus they have experience with criminal law, since that's what they do. They don't spend time messing with estate planning or shit like they, they defend criminal cases.
So depending on the charge, the area you are in, etc, etc a public defender can actually be good, maybe even the best, option. They may have a better handle on the law and be better at trial than a private lawyer.
No one is saying that the NSA can create SHA-1 collisions at will, or decrypt AES at will.
You're being so specific, I bet you're an NSA plant.
Those Journalists In The Public Interest at ProPublica sure seem to think that the NSA has their fingers in every pie.
"I don't know, therefore Aliens" Wafflebox1
If they could break it, we wouldn't have this story. Just the normal conspiracy types saying they can, and no denials.
If the NSA could break RSA, I doubt they'd tell the FBI about it, and I doubt that they'd use it to decrypt a trove of bitcoins. Maybe they might look at some encrypted traffic and figure out where to look, then look there and "happen to spot" some other clue that they could have plausibly stumbled upon, and then provide that clue to the FBI.
That was the sort of thing done in WWII all the time. When sources like Ultra/Magic were used some kind of cover would be created to get the essential data to the people who needed it, as if it had come from someplace else. Protecting the source is more important than taking advantage of the intel.
I have no idea whether the NSA can crack RSA/etc. Certainly no mathematical proof exists that they couldn't, and in fact RSA in particular is known to be vulnerable to factoring via quantum computers - a technology that is entirely theoretically possible.
However, I don't think you can infer anything about the NSA's capabilities from a case like this.
I would be very surprised if there were no NSA plants on slashdot. Ever get into a back-end-forth on slashdot over some scary thing China has done? My understanding is the Chinese government makes no secret of paying people for positive comments, and the longer you argue with a guy who is unreasonably pro-Chinese, the more money he makes.
If I were a policy maker for the NSA, I would certainly fund shills to help guide the development of secure communication architectures. I do believe I've run into these shills a couple of times, for example when discussing if BitTorrent should switch to SHA-256, which I was advocating. Some dick won the debate to stay on SHA-1 by being so annoying that everyone dropped out of the thread. Whether or not the NSA can currently defeat SHA-1, they have to believe that they will develop such an ability long before they can do so with SHA-256, so keeping BitTorrent on SHA-1 makes sense for the NSA. For example, if someone in Iran is downloading a pirated copy of Microsoft Windows using BitTorrent, the NSA might have some very interesting ideas of what they could do with an NSA-modified copy. They could subvert the torrent if they could defeat SHA-1. I suspect an NSA shill whenever I see someone arguing in an unreasonable fashion for a less secure architecture, or one that is secure, but centrally controlled, or spreading paranoia about developing yet-another-encryption algorithm.
In the end, I trust the algorithms that have been proven through trial by fire. Ecliptic curve cryptography has gone way up in my esteem for it's success in Bitcoin. If it could be cracked for a few million dollars by any technically inclined geek out there, it would have been cracked already. If the NSA can crack it with a multi-billion dollar computer, who cares, other than serious criminals?
Celebrate failure, and then learn from it - Nolan Bushnell
If you loose cash it's gone as well. If you hide cash and die, it's likely gone. There are ways to prevent, or at least mitigate the scenarios you describes, though. The keys to my the addresses the bulk of bitcoins are stored in are in an encrypted wallet on an offline computer. The keys are deterministic and I have a physical backup of the root stored in a secure location. I have an online computer with a copy of the wallet without the private keys that I can create transactions with take to my offline computer and sign. I use this process for larger transactions and for smaller transactions to my android client if I need to take some with me.
As with the leather wallet in my back pocket my mobile bitcoin wallet only has a small bit of my net worth in it. If I lose either, that bit of money is gone. My keys can't be stolen by a hacker because of an airgap to the internet. They can't be stolen by a burglar because they are encrypted. And if that computer is stolen or I forget my password I can restore the keys from my physical backup. If I die my wife can do the same.
The bitcoin client Armory is designed for this type of setup.
Well, it is a problem for the person who forgot their password. Of course, with bitcoin their are many ways to implement your storage that you can have unencrypted backups in a secure place and only need the password for the easier-to-access encrypted wallet.
But that is part of the game. You gut someones means and prosecute them so they can't defend themselves. That is the game the government plays.
Let me get this straight. Are you implying that this is some sort of unjust conspiracy against this person? Do you mean to suggest that he is being unjustly persecuted/prosecuted? Are you implying that it wasn't perfectly and entirely clear that his actions were illegal, virtually everywhere?
Your post has a tone that suggest that you think an evil and unjust government action is being perpetrated against an upstanding citizen. My view is a bit different. This isn't someone making a stand against unjust laws for political reasons or based on moral or principal. This is a drug-dealing-sack-of-shit middleman who managed to do an epic business in a thoroughly illegal trade.
Seriously. Grow up.
How do they know he got 600,000 bitcoins, and how do they know that he didn't spend them after he got them? As far as I can tell, they can't prove that he ever received 600,000 bitcoins, and chances are, he has spent some of them. The fact that he lived in a shared apartment and had not real business facilities makes me think that the whole thing about him having made any decent amount of money is made up. Probably this isn't even the guy. He's probably just a loud moth ego maniac whose lies have now got him under the FBIs lamp.
If you are not allowed to question your government then the government has answered your question.
It is considered good practice to encrypt your private key with a passphrase. Then even if your private key is compromised it cannot be decrypted without the passphrase in your head.
That passphrase would usually be digested into a 128 or 256bit secret key and the private key would then be encrypted with AES. Safe and sound.
The government is pissed at Ross for making a profit for what the governmet does for profit, except the government does not like competition.
The mind conceives, the body achieves, the spirit manifests.
it suggested that his commissions were in the range of $80 million -- or about 600,000 Bitcoins. You might notice the disconnect between the 26,000 Bitcoins seized and the supposed 600,000 Ulbright made.
Wouldn't the vast majority of his commissions have already been spent or at least laundered long ago? Why does everyone expect him to have left all of his income in his wallet?
They don't need the money to bust him. But because they are drug related crimes they can steal the money (along with everything else he and anyone they can find the slightest indication knew about what he did own) and keep it for the agency. You can be damn sure they want that money.
Why do you think police organizations support the war on drugs so much? They know as much as anyone that it is a pointless war on citizens. They support it so heavily because stealing the money of a multi-millionaire they caught selling a buddy turned snitch 1/4oz ($50) of weed as a favor is a big part of how they fund their organizations. It's why the party who doesn't want to pay taxes supports it so strongly. They'd actually have to fully fund the police by paying their taxes without the war on drugs.
Why is that a problem? What does it matter if my purchases are denoted in bitmils or whole bitcoins? You just pick some reasonable decimal place along the bitcoin to call the new "1" and you are back to the kind of numbers we are used to dealing with.
> You'd have put money away and bonded lawyers so they could "spring you"? How exactly are these lawyers going to do that? Ulbricht is guilty as fuck and clearly knows it. The two criminal complaints are overflowing with evidence and that's not going to be all the Fed's have got. I have a hard time seeing how any lawyer is going to wriggle out from under all that stuff. Doesn't matter if you somehow managed to bond the best of the best ahead of time
Perhaps that is all true. The lawyers only need to get one juror to say reasonable doubt, though. There was a mountain of evidence against OJ Simpson. His team found the Furman tape and OJ walked.
If you send your money to someone in the US, paying them to commit a crime in the US, that money which is now part of a US crime is going to be seized in the US.
Some cases bring up interesting questions of jurisdiction. This case isn't one of them.
If he has secured his keys, no one can touch his coins.
If the FBI take all the copies of his wallet, he'll never touch them again either.
They gave someone a Nobel peace prize for talking about peace while engaging in war. Close enough.
Did they try "swordfish"?!?
Science advances one funeral at a time- Max Planck
Imagine finding a slip of paper from old grandaddee's in the attic, with the details and 1000 bitcoins. The word is "deflation".
Science advances one funeral at a time- Max Planck
's. To catch people breathing. The retardation of the drug war leaves you no confidence in anything the government is doing. If there is any budget the Tea Party should end the war on drugs is it. I would say a 3 percent drop in taxes for all would be quit nice. As we get nothing for no matter how many people you stop from breathing the same amount is still out there.
If you loose cash it's gone as well.
Yes, but we can just print more.
Finally! A year of moderation! Ready for 2019?
Say you have a job and make $5.000 per month. Don't mind if you make more or less and that I just took a round figure out of thin air. That works out to $60000 per year. Five years go by and you've earned $300000. How much money is there in your account 5 years later? Do you likely have $300000 sitting there in your account at that point in time? OR did you perhaps spend each months paycheck paying for rent, utilities, food and other items? I don't know about you but if you are like most people then you probably do NOT have $300000 sitting there in your account after 5 years. You more likely spent everything you got last month and perhaps you have $2000 left of that last $5000 paycheck sitting there in your account. Think about this for a minute. The claim is that SR generated an income of 600.000 BTC. The price of a Bitcoin was $1-2 during SRs lifetime. It was less than $10 during most of SRs lifetime. Media story and popular opinion seems to be that Ulbricht never spent a single Bitcoin but somehow managed to pay bills and expenses anyway and that all bitcoins SR ever made therefore must be sitting in a wallet somewhere. I personally find that opinion highly unlikely.
9/11: Never forget it was a false-flag operation
They have any passwords he would use on a regular basis - including any for keepass or similar password wallets.
If they had all the passwords, they wouldn't need to wait for him to log in to the notebook.
If you, for example, had some Bitcoin in your wallet on the site and you were hoping to buy a gold coin anonymously then you have broken no law.
But now the DoJ has taken your money...
how do you get your coins back? Who do you call?
Not everybody on the site was a criminal.
A blog I run for the wealth
You don't need access to the wallet.dat file to spent your bitcoins, just the private key. If you have that then there nothing anyone can do to prevent you from using it.
He'd better call Saul!
If the US cashes out the bit coins then it is endorsing it as a legitimate world currency. If it deletes them then it reduces supply and increases the value for all the "criminals" that trade with them.....